Information System Development and Security Management

A collection of vocabulary flashcards covering key terms and concepts related to the Software Development Life Cycle (SDLC), project management, and information security.

SDLC

Software Development Life Cycle, a methodology for the design and implementation of an information system.

Investigation Phase

The phase in SDLC that determines the problem the system aims to solve.

Analysis Phase

The phase where the expected functions of the new system and its interaction with existing systems are analyzed.

Logical Design Phase

The blueprint of the desired solution in the SDLC.

Physical Design Phase

The phase where specific technologies are selected to support the identified solutions.

Maintenance & Change Phase

The phase initiated when an existing program/system is ineffective or inefficient, involving key security activities.

CIA

Confidentiality, Integrity, and Availability; key concepts in information security.

Risk Assessment

A process conducted during the Design Phase to analyze security requirements and supplement baseline security controls.

System Accreditation

A process that includes certification activities to ensure a system meets security standards.

Operational Readiness Review

An evaluation conducted in the Operations/Maintenance Phase to ensure a system is ready for operation.

Disposal Phase

The final phase where plans for disposing of hardware and software and archiving critical information are executed.

Project Plan

A document outlining project leadership, technical considerations, and management of organizational resistance to change.

Work Breakdown Structure (WBS)

A tool used for creating a project plan that breaks down major project tasks into smaller, manageable activities.

Financial Considerations

Factors that determine how much effort can be expended on security needs based on available funds.

Conversion Strategies

Approaches to implementing changes in information systems, including direct changeover and phased implementation.

Technology Governance

The framework guiding how often technical systems are updated and the processes for approving and funding those updates.